Actuary / Senior Actuary

Munich Re acquires cyber insurtech At-Bay for $575 million. Insurance alone is no longer enough: For $575 million, Munich Re is acquiring At-Bay, a platform for cyber insurance and active cybersecurity. News by Marc Nemitz · München, 20. August 2026 The Munich Re Group is further expanding its cyber insurance business and acquiring the U.S. insurtech company At-Bay. The agreed-upon enterprise value is 575 million U.S. dollars. With this acquisition, the insurance group aims to more closely integrate insurance coverage with active cybersecurity. $575 million for At-Bay. Munich Re has entered into an agreement to fully acquire At-Bay. Subject to the necessary regulatory approvals, the transaction is expected to close in the first quarter of 2027. Following the acquisition, At-Bay will be managed by Hartford Steam Boiler (HSB). HSB is part of Munich Re's Global Specialty Insurance segment and has been a strategic partner of At-Bay since the company's founding in 2017. Cyber insurance meets cybersecurity. At-Bay was founded in 2017 and focuses primarily on small and medium-sized businesses in the U.S. The insurtech company combines traditional cyber insurance with technologies for the ongoing detection, monitoring, and mitigation of cyber risks. Small businesses in particular may find this offering appealing. The threat of cyberattacks is growing, while companies often lack the personnel and financial resources to maintain a comprehensive in-house IT security organization. At-Bay therefore seeks to combine insurance with prevention. Its proprietary security platform monitors risks throughout the term of a policy and simultaneously uses the data collected for underwriting. Munich Re sees this very combination as an important step forward for the market. Cyber insurance could increasingly evolve from a product designed to provide financial protection against losses into a platform for continuous risk management. At-Bay is already among the larger cyber insurers in the U.S. At-Bay employs approximately 280 people in the U.S. and Israel and, according to Munich Re, is now among the top ten cyber insurers in the United States. At the end of 2025, gross premium income totaled 278 million U.S. dollars. In addition, there was fee revenue from cyber services totaling 23 million U.S. dollars. Based on this, the agreed-upon enterprise value of US$575 million is just under double the combined premium and service revenue for 2025. However, a direct valuation comparison is of limited significance due to the different types of revenue. Munich Re is focusing on "InsurSec" At-Bay refers to the combination of insurance and cybersecurity as "InsurSec." Rather than taking action through insurance only after a successful attack, the goal is to identify and mitigate risks as early as possible. Insurance coverage, security measures, and claims handling thus merge into a single integrated system. For Munich Re, this could bring several advantages: If risks are better identified and losses prevented, this could also improve loss ratios in the long run. At the same time, additional services related to the core insurance business will emerge. Mike Kerner, a member of Munich Re's Executive Board, therefore describes At-Bay as a key component of the company's future cyber offering. In the long term, the group expects this business to develop into a strong profit driver. From insurtech to part of an insurance group. The acquisition also highlights an interesting trend in the insurtech market. While many startups originally set out with the goal of challenging established insurers on a technological level, successful technology platforms are increasingly becoming strategically attractive acquisition targets in their own right. In the case of At-Bay, Munich Re - or rather HSB - has supported the company since its founding. For At-Bay, the sale now means access to the capital strength, reach, and insurance expertise of one of the world's largest reinsurers. Munich Re, in turn, is acquiring technology, established access to the U.S. SMB market, and additional expertise in active cyber defense. The purchase price of 575 million U.S. dollars underscores the strategic importance that cyber risks have come to hold for the insurance industry. The key question will be whether Munich Re can actually use At-Bay to establish a scalable model in which insurance does not merely pay out for damages after the fact, but actively helps prevent them in the first place. Equally intriguing is the fact that Munich Re is thereby addressing an area that has often been a point of contention in the event of a claim. Will this issue now be resolved with the acquisition, or will it give rise to entirely new liability questions in the future?

From $1.35 billion unicorn to $575 million sale, At-Bay says the math has changed. CEO Rotem Iram says the cyber insurer has built a much larger business since 2021 while surviving a dramatic reset in technology valuations. 08:39, 20.08.26 "The disappointment is for people who didn't understand that the world has changed. The value should be close to the cash the company creates," Rotem Iram, CEO and co-founder of Israeli cyber insurance company At-Bay, told Calcalist after the company agreed to be acquired by German insurance giant Munich Re Group for $575 million. Iram was referring to the gap between At-Bay's current sale price and the $1.35 billion valuation it reached in 2021, during the peak of the technology funding boom. In his view, the comparison is misleading because the market has changed dramatically since then. "We are not in the same world," Iram said. "In 2021, we had $50 million in insurance premiums. Today, we are almost six times that in premiums, and we have more than $30 million in cyber revenue." "I understand that in 2021 we received a high market value in a zero-interest-rate environment, with high multiples, and we raised according to the market at the time. The market today is realistic. It has returned to the fundamentals. In fact, selling for $575 million in 2026 is a very significant event and a success." At-Bay was founded in 2016 by Iram, Roman Itskovich, Etai Hochman and Tilly Kalisky. The company provides cyber insurance to businesses while integrating cybersecurity monitoring, risk analysis and mitigation into its insurance offering. Rather than simply covering losses after a cyberattack, At-Bay seeks to identify and reduce risks throughout the policy lifecycle. The company has raised approximately $300 million since its founding. Munich Re is among its investors and has been a strategic partner since At-Bay's early years. The acquisition, announced at an enterprise value of $575 million, remains subject to regulatory approvals and is expected to close in 2027. Following the transaction, At-Bay will operate under HSB, Munich Re Specialty's technology-focused insurance business. At-Bay is now among the 10 largest cyber insurance companies in the U.S., with approximately $280 million in gross written premiums and more than $30 million in annual cybersecurity revenue. The company employs more than 280 people in the U.S. and Israel. Iram said the transaction will benefit both investors and employees. "All the investors made money in the deal. We take great care of our investors, and all the employees made money," he said. "$300 million in new money came in beyond the money we raised. We built a real company with 280 employees, and we will become a full-fledged business unit. No one is leaving. The founders are also staying with the company." Iram framed the acquisition as evidence that At-Bay had survived a funding environment that eliminated many of the companies that raised capital during the technology boom. "When the ground falls away from under your feet, most companies do not survive the value collapse. Few managed to get through the difficult years," he said. "The disappointment is for people who did not understand that the world has changed. The value should be close to the cash that the company creates." "Most growth companies collapsed and failed to survive. We multiplied ourselves sixfold. Such a violent change kills 99% of companies, which is why we are a huge success." He also pointed to the difficulty of building an insurance company with venture capital rather than relying on a major financial institution. "We built an insurance company without significant backing from a financial institution. Starting an insurance company with venture capital money and building a market leader is no easy task. For me, this is a great success," Iram said. "Many other companies raised a lot of money and had a hard time paying it back. We were very conservative in raising capital, and so we were able to return the investment." At-Bay's other investors include Qumra Capital, Microsoft's M12 fund, Shlomo Kramer, Lightspeed, Glilot Capital, Acrew Capital and Khosla Ventures. The company focuses on small and medium-sized businesses in the U.S., which often lack the cybersecurity resources and expertise available to larger enterprises. Through its unified security platform, At-Bay identifies, monitors and mitigates cyber risks for more than 35,000 insured companies while using the resulting data to improve its underwriting. For Munich Re, the acquisition is also a bet on the convergence of insurance and cybersecurity. "At-Bay's market position and unique capabilities make it a perfect addition to our specialty insurance portfolio and an essential component of our future cyber offering," said Mike Kerner Member of the Board of Management, Munich Re. "The acquisition further expands the depth and breadth of our specialty insurance expertise, ultimately benefitting all partners and clients of Munich Re Specialty. We expect the business to evolve into a strong earnings growth driver over time." Jeffrey O'Shaughnessy, president and CEO of HSB Group: "HSB and At-Bay are a logical match, each with a history and vision of risk prevention, mitigation and market-leading cyber risk solutions. The combination of At-Bay's market-leading cyber capabilities and HSB's intense cyber and underwriting expertise will significantly enhance our cyber offering and accelerate our speed to innovate in a market moving towards vertically integrated insurer-security platforms."